Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: w4y5d+nXWGIP2ehJjnSUizSjZUzSA86wFb1wqAbABv8=
Subject key identifier: 06:9C:C6:7B:DA:92:10:FF:78:D2:CC:52:A8:6C:F1:95:F9:04:D2:C4
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 019D9A3E8FFCF838034376938BBCE2A6E70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 07:01:24 +0000
Manifest this update: Fri 17 Apr 2026 07:01:24 +0000
Manifest next update: Sat 18 Apr 2026 07:01:24 +0000
Files and hashes: 1: MmigRRL2LyWePgn6NdPmnp-_7Fo.roa (hash: BqaSO/Kz9QyCKoZzd5EqVaPPf4EzqcDWslrygs00Jqs=)
2: PVLhPYh9NJguck7AY7uc4y9zEXc.roa (hash: K7wMgagtYa/+gA6yFcAepqwtwV8qsQ0klI3xlG+quOA=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: SaSOWtVRuT57dC9P4eDi2pyEeBqZDSW66uxNvcfesnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:8f:fc:f8:38:03:43:76:93:8b:bc:e2:a6:e7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Apr 17 07:01:24 2026 GMT
Not After : Apr 18 07:01:24 2026 GMT
Subject: CN=069cc67bda9210ff78d2cc52a86cf195f904d2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:81:07:ef:17:67:ca:1c:67:30:9a:60:f9:
43:74:e1:20:05:14:43:58:39:0b:4d:d8:c3:93:6e:
00:c6:4b:4d:48:8e:d6:c0:ff:bc:62:38:1b:72:2a:
df:d4:62:ae:9a:84:41:48:52:a6:c6:ae:52:70:d8:
d6:13:70:7f:d2:6c:91:f5:87:7c:23:14:e0:24:68:
fa:81:e4:0f:b4:f9:a1:31:1c:30:03:ec:cf:fa:f2:
e8:6d:86:96:d8:9f:f2:aa:68:4a:08:6a:05:fd:28:
59:04:af:66:4a:c6:64:87:74:ea:76:3d:88:26:6d:
47:20:b6:3f:76:a5:99:4f:ec:97:3e:5f:fc:23:6a:
7e:87:64:88:f3:48:f1:b9:d0:2a:46:79:c8:7c:be:
96:c7:06:28:b7:57:4d:d5:d9:a7:0e:99:75:8f:7f:
b8:f4:f0:ed:3d:e1:93:a7:27:a4:19:39:a9:e7:44:
e9:e2:c3:6e:b6:a4:8b:21:e5:a5:8c:d3:5a:ba:e2:
7a:03:9d:7b:13:72:ee:d6:eb:9e:60:12:d7:d2:79:
ff:a8:f6:81:bf:27:39:e2:08:77:f5:5a:e9:42:a7:
eb:35:f8:8a:00:70:27:8a:ee:9d:87:5d:02:3d:10:
55:a6:69:03:c5:e6:12:a5:d8:4c:2b:98:38:ac:9c:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9C:C6:7B:DA:92:10:FF:78:D2:CC:52:A8:6C:F1:95:F9:04:D2:C4
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1e:ea:97:ce:8c:e5:86:e7:10:0f:54:f3:95:f6:ea:0c:ac:
6c:02:90:f6:0b:32:6c:74:a5:de:c2:16:53:69:d1:7d:63:3d:
ac:ea:6b:c9:a5:12:ef:18:bb:1c:4d:1e:23:7b:3b:80:74:c4:
74:86:54:e9:e1:e3:29:e0:9a:1e:6a:bd:b1:a9:2d:e6:8f:09:
6a:40:1c:ad:fc:c6:38:df:d2:81:c6:69:12:29:57:cb:05:46:
c7:97:50:dd:93:d5:54:c5:2e:93:f1:72:83:d1:5e:64:31:01:
53:21:7a:b2:1e:dc:eb:e7:6b:b0:52:47:e8:90:0f:06:96:0d:
26:df:fc:00:10:76:51:7b:3b:36:60:3c:d3:fb:94:21:cf:27:
ca:89:07:65:a4:c4:26:81:0a:ee:c4:56:d2:15:0f:9a:ff:19:
b4:b1:a5:7e:5b:6f:b5:c2:07:0d:53:a8:a6:7d:77:6d:7c:5c:
7a:5b:e9:68:cb:6e:08:16:c8:ab:0c:8c:b5:3a:f3:b8:39:5b:
e3:d3:d5:5c:15:93:4a:71:a8:8e:62:ba:c6:5d:80:37:ef:d3:
0f:fb:e4:ea:e9:a7:1d:85:11:62:e1:b8:84:85:16:2a:ca:f5:
83:59:c7:3d:85:94:1b:7b:99:fa:ab:2d:e5:87:d2:5e:59:cd:
d1:72:a2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:21 2026 by rpki-client